A Method of Extracting Zero Watermark from Network Data Flow Using Information Entropy and Hash Function

Abstract

The invention discloses a method for zero watermark extraction of a network data stream by employing information entropy and a hash function. According to the algorithm, in original traffic of a transmitting terminal, the fragmentation of the data stream is performed according to time, statistics of the distribution condition of sizes of data packets is performed, Shannon entropy is calculated, and zero watermark extraction of the data stream is performed by employing the hash function; at a receiving terminal, zero watermark extraction of received traffic is performed again by employing the same method; and whether the transmitting terminal and the receiving terminal have an obvious network communication relation is confirmed via comparison of zero watermarks extracted at two terminals. By employing the extraction and detection method of a network stream zero watermark system, the network communication relation between the transmitting terminal and the receiving terminal in an anonymous communication system can be effectively determined, and theoretical basis is provided for DDoS attack localization.

Description

technical field [0001] The invention relates to the field of confirming the relationship between communication parties in an anonymous network environment, and more specifically, relates to a method for extracting a watermark from a network stream by using information entropy and a hash function, and a system for extracting and detecting the zero watermark of the network stream. Background technique [0002] With the rapid development of global informatization, computer network has become one of the most exciting high-tech in the world today. Network resource sharing, information exchange and distributed processing bring great convenience to study, work and scientific research. However, various attacks emerge in an endless stream, bringing huge potential threats and damage to computer networks and systems. [0003] Since 2000, network attacks have occurred continuously. According to the "2003 FBI Computer Crime and Security Survey", DDOS attacks are the second largest netwo...

AI Technical Summary

Problems solved by technology

The main disadvantages are: (1) Modify the IP protocol; (2) When the attack traffic is large enough, the backtracking performance is acceptable. For small traffic and single-packet attacks, the false positive rate and false negative rate are quite high

The key problem of this type of scheme is: due to the limited storage resources of routers, packet records are easily lost

Images